Tianjie Xu f69e6a9475 Add a checker for signature boundary in verifier ...

The 'signature_start' variable marks the location of the signature
from the end of a zip archive. And a boundary check is missing where
'signature_start' should be within the EOCD comment field. This causes
problems when sideloading a malicious package. Also add a corresponding
test.

Bug: 31914369
Test: Verification fails correctly when sideloading recovery_test.zip on
angler.

Change-Id: I6ea96bf04dac5d8d4d6719e678d504f957b4d5c1

2016-12-16 16:01:42 -08:00

..

alter-footer.zip

Refactor existing tests to use gtest

2016-02-04 10:11:30 -08:00

alter-metadata.zip

Refactor existing tests to use gtest

2016-02-04 10:11:30 -08:00

bonus.file

applypatch: Add testcases for applypatch executable.

2016-11-01 14:40:14 -07:00

boot.img

applypatch: Add testcases for applypatch executable.

2016-11-01 14:40:14 -07:00

fake-eocd.zip

Refactor existing tests to use gtest

2016-02-04 10:11:30 -08:00

jarsigned.zip

Refactor existing tests to use gtest

2016-02-04 10:11:30 -08:00

new.file

Port applypatch.sh tests to recovery_component_tests

2016-03-11 18:37:34 -08:00

old.file

Port applypatch.sh tests to recovery_component_tests

2016-03-11 18:37:34 -08:00

otasigned_v1.zip

Clean up verifier testcases.

2016-08-01 11:32:28 -07:00

otasigned_v2.zip

Clean up verifier testcases.

2016-08-01 11:32:28 -07:00

otasigned_v3.zip

Clean up verifier testcases.

2016-08-01 11:32:28 -07:00

otasigned_v4.zip

Clean up verifier testcases.

2016-08-01 11:32:28 -07:00

otasigned_v5.zip

Clean up verifier testcases.

2016-08-01 11:32:28 -07:00

patch.bsdiff

Port applypatch.sh tests to recovery_component_tests

2016-03-11 18:37:34 -08:00

random.zip

Refactor existing tests to use gtest

2016-02-04 10:11:30 -08:00

recovery-from-boot-with-bonus.p

applypatch: Add testcases for applypatch executable.

2016-11-01 14:40:14 -07:00

recovery-from-boot.p

applypatch: Add testcases for applypatch executable.

2016-11-01 14:40:14 -07:00

recovery.img

applypatch: Add testcases for applypatch executable.

2016-11-01 14:40:14 -07:00

signature-boundary.zip

Add a checker for signature boundary in verifier

2016-12-16 16:01:42 -08:00

testkey_v1.pk8

Clean up verifier testcases.

2016-08-01 11:32:28 -07:00

testkey_v1.txt

Clean up verifier testcases.

2016-08-01 11:32:28 -07:00

testkey_v1.x509.pem

Clean up verifier testcases.

2016-08-01 11:32:28 -07:00

testkey_v2.pk8

Clean up verifier testcases.

2016-08-01 11:32:28 -07:00

testkey_v2.txt

Clean up verifier testcases.

2016-08-01 11:32:28 -07:00

testkey_v2.x509.pem

Clean up verifier testcases.

2016-08-01 11:32:28 -07:00

testkey_v3.pk8

Clean up verifier testcases.

2016-08-01 11:32:28 -07:00

testkey_v3.txt

Clean up verifier testcases.

2016-08-01 11:32:28 -07:00

testkey_v3.x509.pem

Clean up verifier testcases.

2016-08-01 11:32:28 -07:00

testkey_v4.pk8

Clean up verifier testcases.

2016-08-01 11:32:28 -07:00

testkey_v4.txt

Clean up verifier testcases.

2016-08-01 11:32:28 -07:00

testkey_v4.x509.pem

Clean up verifier testcases.

2016-08-01 11:32:28 -07:00

testkey_v5.pk8

Clean up verifier testcases.

2016-08-01 11:32:28 -07:00

testkey_v5.txt

Clean up verifier testcases.

2016-08-01 11:32:28 -07:00

testkey_v5.x509.pem

Clean up verifier testcases.

2016-08-01 11:32:28 -07:00

unsigned.zip

Refactor existing tests to use gtest

2016-02-04 10:11:30 -08:00

ziptest_dummy-update.zip

Replace minzip with libziparchive

2016-10-17 17:41:51 -07:00

ziptest_valid.zip

Replace minzip with libziparchive

2016-10-17 17:41:51 -07:00